Vulnerabilities > CVE-2006-6166 - Unspecified vulnerability in Ryan Demmer Joomla Content Editor 1.0.4

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ryan-demmer
NVD
Published: 2006-11-29
Updated: 2024-11-21

Summary

Cross-site scripting (XSS) vulnerability in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.0.4 for Joomla! (com_jce), without the 20060821 jce_patch, allows remote attackers to inject arbitrary web script or HTML via the mosConfig_live_site parameter.

Vulnerable Configurations

Part Description Count
Application
Ryan_Demmer
1

References